Current Behavior

Currently when you're adding component with CPE like:

cpe:2.3:a:7-Zip:7-Zip:18.03:::::::*

The DependencyTrack analyzers will not find any issues. When switching from "Z" to "z" everything works correctly:

cpe:2.3:a:7-zip:7-zip:18.03:::::::*

Proposed Behavior

The CPE (and PURL I suppose) should be case-insensitive, all combination should find vulnerabilities.

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this enhancement was already requested